mirashii

8 ms·

1.
by mirashii 4d ago
But what are "all these things"? It does not define away all of the UB that C/LLVM has for sure, nor does it turn all UB into crashes, which I demonstrated above and is the inaccurate description of Fil-C that spawned this. B
2.
by mirashii 4d ago
I reference C's here because it gives the best idea of what clang/LLVM itself is going to consider UB and the bulk of the optimization semantics (where they haven't been changed by Fil-C), since Fil-C is really a fork with so
3.
by mirashii 4d ago
You seem to be trying to apply some colloquial definition of undefined behavior. Undefined behavior is a very specific, defined term. The shift(1, 32) call is by definition undefined behavior (See 6.5.7 in the C standards from C99 up). The
4.
by mirashii 4d ago
Neither. I'm claiming that UB allows a transform that violates or ignores the additional guards put in place by Fil-C, and by the definition of UB that is not a bug in the compiler, as any behavior is allowable. To assert that somethin
5.
by mirashii 4d ago
I'm not so sure you can make such a strong statement about what happens when UB is invoked. The presence of UB allows the compiler to make all kinds of weird assumptions, and it seems very unlikely that there exists no series of allowa
6.
by mirashii 4d ago
#include <stdio.h> #include <stdlib.h> int shift(int x, int n) { return x << n; } int main(int argc, char **argv) { printf("%d\n", shift(1, 32)); /* n == width: UB */ return 0
7.
by mirashii 4d ago
> Fil-C or similar runtime handling so that any time its behaviour would become undefined the program exits instead It’s worth being clear here that this is not what Fil-C does, it still has UB, and can still explode in many of the same
8.
by mirashii 5d ago
In either case, more of these coming out continues to make their announcement of a two week pause for hardening somewhat laughable. If they couldn’t either identify or communicate within 2 weeks about yet another incident, why should anyone
9.
by mirashii 9d ago
I would put both of those projects in the category of things I wouldn't call remarkably secure, yes. To be remarkably secure, these projects would need to not have these kinds of defects, despite the combination of being written in lan
10.
by mirashii 9d ago
The "surprisingly secure" WordPress just had a unauthenticated RCE earlier this year. Just simplifying isn't going to be enough. https://nvd.nist.gov/vuln/detail/cve-2026-63030
11.
by mirashii 14d ago
They’re the second largest manufacturer of Android smartphones in the US, and 10% of the global market. Seems a bit unreasonable to dismiss them out of hand on that basis.
12.
by mirashii 17d ago
To make matters worse, there’s also a weaker documentation problem. Where should one learn that they need to do this? zig.guide’s page on ArrayList doesn’t mention it. https://ziglang.org/documentation/master/std&#
13.
by mirashii 17d ago
Just in case, you can check your config. https://code.claude.com/docs/en/settings-reference#remotecon...
14.
by mirashii 17d ago
This isn’t quite true. There’s a daemon you can launch with `claude rc` that will let you get at all sessions, but if you just `/rc` in one session only that session becomes available.
15.
by mirashii 17d ago
> under license terms that permit a recipient to copy, redistribute, and modify the software The “under license terms…” is a pretty important clause you omitted here.
16.
by mirashii 17d ago
By requiring hardware attestation, like Private Access Tokens in iOS/MacOS (see https://blog.cloudflare.com/eliminating-captchas-on-iphones-... for example) and Web Environment Integrity and its successors ( https:&#x
17.
by mirashii 21d ago
You're the only mention of Apple in this thread, and I don't see what they have to do with it.
18.
by mirashii 22d ago
PoC || GTFO has an issue that is a PDF that is also a valid NES rom which will render the md5sum of the PDF itself, and other crazy tricks of that type over the years. https://dl.packetstormsecurity.net/mag/pocgtfo&#x2F
19.
by mirashii 27d ago
It’s absolutely mad and extremely entitled to expect that a volunteer group of developers do an order of magnitude or more additional work for no additional pay or benefits to themselves.
20.
by mirashii 28d ago
This is only a small piece of the story for what people say when they want tagged unions. Without all of the ancillary support in the language, like exhaustive pattern matching, it really doesn't count.
21.
by mirashii 29d ago
> People's urge to rid the world of ads is similar to our urge to rid the world of "middlemen". This is a lazy strawman and not what the author of the post argued for. > It's natural, and I get it (ads are annoying
22.
by mirashii 1mo ago
Probably the shortest statement of Filip's definition is at https://fil-c.org/invisicaps . There's a few other statements around HN and twitter, like this https://news.ycombinator.com/item?id=43195
23.
by mirashii 1mo ago
> Rust isn’t memory safe (because unsafe) isn't an argument anyone makes This is an argument that Fil-C makes, by choosing a very specific definition of memory safety. It’s even stated explicitly in that tweet linked.
24.
by mirashii 1mo ago
> AI companies already store all prompts and responses for future training. They store some prompts and responses, not all, that's what you're missing.
25.
by mirashii 1mo ago
If I’ve understood correctly, what your missing here is that the first core in SMM tells the second to join it in SMM, times out on the wait, does its thing and exits, but then the second core joins SMM after the first has exited, so now th
26.
by mirashii 1mo ago
Just FYI, it’s “piqued my interest”
27.
by mirashii 1mo ago
What’s the point? To save money paying a human to man a support email. That human would have also been hopelessly uninformed for all the same reasons.
28.
by mirashii 2mo ago
The root cause seems to be known, unlike what this article implies. A bunch of other articles discuss the entropy issue, https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt for one I found quickly.
29.
by mirashii 2mo ago
> give them a json specification, they're not always amazing at following it Used correctly, this hasn't been true for a quite a while. Most inference engines have a form of grammar constrained decoding. See, for example: http
30.
by mirashii 2mo ago
> The Fil-C runtime is tiny compared to TS and C# Sure, this is a simple fact. > So Fil-C is safer than those This is not a simple fact that follows, and a good example of why you seem to be catching so much criticism for overly bold

More ›